Privacy Policy

Introduction

This privacy notice describes how and why we might collect, store, use, and/or share your information when you use our services ("Services"), such as when you:

• Download and use our mobile application (My Spot / Meine GPS Koordinaten) or any other application of ours that links to this privacy notice
• Engage with us in other related ways, including any sales, marketing, or events

We use your Personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Last updated 11 February 2024

Content

1. Overview of Processing
1. Special Notes on Applications (Apps)
2. Device permissions for access to functions and data
1. Processing of location data
2. Google Maps
3. Download of applications via app stores
1. Google Play
4. Deletion of data
5. Change and update of the privacy policy
6. User Rights
7. Definitions of terms
8. Person in authority

1. Overview of Processing

The following overview summarizes the types of data processed and the purposes of their processing and refers to the individuals affected. Types of data processed:

• Location data (information of the geographical position of a device or person).

Categories of affected individuals

• Users (users of the app).

Purposes of Processing

• Provision of contractual performance and customer service.

Relevant legal bases

Below is an overview of the legal bases of the GDPR on which we process personal data. Please note that in addition to the regulations of the GDPR, national data protection regulations may apply in your or our country of residence or establishment. Furthermore, if special legal bases are relevant in individual cases, we will inform you of this in the privacy policy.

• Consent ( 6 para. 1 (a) GDPR) - The individual has given their consent to the processing of their personal data for a specific purpose or multiple specific purposes.
• Contractual fulfillment and pre-contractual inquiries (Art. 6 para. 1 (b) GDPR) - Processing is necessary for the fulfillment of a contract, of which the individual is a party, or for the implementation of pre-contractual measures taken at the request of the individual. l
• Legitimate Interests ( 6 para. 1 lit. f GDPR) - Processing is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the individual, which require the protection of personal data, take precedence.

National data protection regulations in Germany

In addition to the data protection regulations of the General Data Protection Regulation, national data protection regulations apply in Germany. This includes in particular the Act to Protect Against the Misuse of Personal Data in Data Processing (Federal Data Protection Act - BDSG). The BDSG contains special regulations on the right to information, the right to deletion, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision-making in individual cases including profiling. Furthermore, it regulates the processing of personal data for the purpose of the employment relationship (§ 26 BDSG), in particular with regard to the establishment, performance or termination of employment relationships and the consent of employees. Furthermore, state data protection laws of the individual federal states may apply.

1.1 Special Notes on Applications (Apps)

We process the data of the users of our application insofar as this is necessary to provide the users with the application and its functionalities, to monitor its security and to develop it further. We may also contact users in compliance with legal requirements, provided that the communication is necessary for purposes of administration or use of the application. In all other respects, we refer to the data protection information in this privacy policy with regard to the processing of users' data.

2 Device permissions for access to functions and data

The use of our application or its functionalities may require user permissions for access to certain functions of the devices used or to the, data stored on the devices or accessible by means of the devices. By default, these permissions must be granted by users and can be revoked at any time in the device's settings.

2.1 Processing of location data

As part of the use of our application, location data collected by the device used or otherwise entered by users is processed. The use of location data requires user authorization, which can be revoked at any time. The collected locations are used to display the current location coordinates and their properties on the interface and to cache the coordinates or export them to a GPX file. By default, the application receives accurate coordinates from the GPS module, but the user can change this in the app's settings menu if they want to receive less precise coordinates. This location data is only stored locally on the device used and is not shared with third parties.

2.2 Google Maps

This site uses the map service Google Maps via an API. The provider is Google Ireland Limited ("Google "), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

More information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

3 Download of applications via app stores

Our application is obtained via special online platforms operated by other service providers (so-called "app stores"). In this context, those of the respective app store apply in addition to our privacy policy:

3.1 Google Play:

• Types of data processed: inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject matter of contract, term, customer category), usage data (e.g. web pages visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses). You can read more about Playstore's privacy policy here.
• Affected person: Customers.
• Purposes of processing: provision of contractual services and customer service.
• Legal Grounds: Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

More information about Google Play's privacy policy can be found here: https://policies.google.com/privacy?hl=de

4 Deletion of data

The data processed by us will be deleted in accordance with the legal requirements as soon as their consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data has ceased to apply or it is not necessary for the purpose).

The data will be deleted from the device if the user uninstalls the app from his device or deletes the app data.

Our privacy notices may also contain further information on the retention and deletion of data, which will take precedence for the respective processing operations.

5 Change and update of the privacy policy

We ask you to regularly inform yourself about the content of our privacy policy. We adapt the data protection declaration as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.

If we provide addresses and contact information of companies and organizations in this privacy statement, please note that the addresses may change over time and please check the information before contacting us.

6 User Rights

As a user, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:

• Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
• Right of revocation for consents: You have the right to revoke any consent you have given at any time.
• Right to erasure and restriction of processing: You have the right, in accordance with the law, to request that data relating to you be erased immediately or, alternatively, to request restriction of the processing of the data in accordance with the law.
• Right of access: You have the right to obtain confirmation as to whether data in concern are being processed and to obtain information about these data and to obtain information about this data, as well as further information and a copy of the data in accordance with the legal requirements.
• Right to data portability: You have the right to receive data concerning you, which you have provided to us, in a structured, common and machine-readable format in accordance with the legal requirements, or to demand its transfer to another responsible party.
• Complaint to the supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the requirements of the GDPR.

7 Definitions of terms

This section provides you with an overview of the terms used in this privacy statement. Many of the terms are taken from the law and defined primarily in Art. 4 of the GDPR. The legal definitions are binding. The following explanations, on the other hand, are primarily intended to help you understand them.

• Personal data: "Personal data" is any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Location data: Location data is created when a mobile device (or another device with the technical requirements of location determination) connects to a radio cell, a WLAN, a GPS module or similar technical devices and functions of location determination. Location data serves to indicate at which geographically determinable position on earth the respective device is located. Location data can be used, for example, to display map functions or other information dependent on a location.
• Responsible person: Means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
• Processing: "Processing " means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and includes virtually any handling of data, be it collection, analysis, storage, transmission or deletion.

8 Person in authority

Robin Eckhardt
Heckerswiesenstraße 13
34121 Kassel